Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/b44547d4552bb05810ecf0f88cb9a006a057c468.roa
File: b44547d4552bb05810ecf0f88cb9a006a057c468.roa (raw, json)
Hash identifier: SzOVDnEgPnR9ig64U3I46uyWgRU62vZV/Eep/E2pybY=
Subject key identifier: AE:D6:95:41:40:AE:4A:85:8A:C1:0A:5D:37:AC:42:DF:DA:FD:FA:71
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 113154
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/b44547d4552bb05810ecf0f88cb9a006a057c468.roa
Signing time: Thu 18 Nov 2021 08:33:56 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 212238
IP address blocks: 191.96.21.0/24 maxlen: 24
191.96.121.0/24 maxlen: 24
191.96.112.0/24 maxlen: 24
191.96.113.0/24 maxlen: 24
191.96.114.0/24 maxlen: 24
191.96.115.0/24 maxlen: 24
191.96.201.0/24 maxlen: 24
191.96.198.0/24 maxlen: 24
191.96.199.0/24 maxlen: 24
191.101.42.0/24 maxlen: 24
191.101.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1126740 (0x113154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=b44547d4552bb05810ecf0f88cb9a006a057c468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:c3:3a:b6:8a:5c:4e:d6:dc:b9:23:df:fc:
ed:39:21:dc:20:45:49:90:77:b5:bc:5b:3c:a5:5f:
ee:47:15:33:f0:c2:4a:22:49:68:d8:6c:74:88:73:
ef:1a:ba:27:17:de:e1:c8:f9:6d:f6:da:98:22:5e:
80:bd:63:79:e9:58:51:ea:91:91:3a:34:8f:77:12:
93:2c:58:85:c0:3c:55:74:f9:75:59:c7:b5:47:6f:
40:38:15:cb:2c:78:c7:49:65:5d:fd:71:79:5a:6a:
73:a1:2e:84:d0:41:32:f8:40:51:70:af:c2:78:e7:
d7:fd:67:ce:c1:06:47:41:6a:ee:8b:e7:05:30:36:
af:08:0b:dc:dc:5d:f3:fa:68:06:70:3e:79:03:19:
44:25:ce:11:93:bc:70:c4:fa:e6:38:79:ce:f7:95:
ea:e1:b4:74:ae:af:c8:f3:07:83:3e:b8:0d:3d:8a:
eb:27:29:0e:5e:f7:31:95:79:e4:fe:71:37:19:37:
5c:a6:00:fc:ec:70:9a:39:68:6b:b0:7b:27:45:f5:
27:99:e8:d1:65:7f:fe:a5:85:4f:9a:eb:7d:ac:15:
8e:5a:6c:e0:8f:6a:33:23:76:14:19:9d:25:ac:e7:
22:3b:10:43:c4:16:74:c8:32:6a:3c:f5:13:25:ad:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D6:95:41:40:AE:4A:85:8A:C1:0A:5D:37:AC:42:DF:DA:FD:FA:71
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/b44547d4552bb05810ecf0f88cb9a006a057c468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.21.0/24
191.96.112.0/22
191.96.121.0/24
191.96.198.0/23
191.96.201.0/24
191.101.42.0/24
191.101.129.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d9:c1:1b:4d:0b:0f:ee:03:d2:ab:f1:db:bb:5c:50:e6:50:
af:4e:7d:a1:d6:83:46:f6:74:6d:1d:8f:b2:8b:43:12:9b:78:
61:ed:30:e3:d2:0d:f2:57:ca:dd:87:90:fa:18:3f:9d:14:09:
1a:2d:30:40:57:a9:22:af:92:b0:c9:95:c8:c9:ab:4a:35:fa:
2d:c5:98:c6:ff:f6:df:0a:52:2c:a4:7c:1d:20:30:52:a7:c8:
fa:d7:d1:7d:53:29:8d:76:e9:14:be:5f:84:f1:fe:2e:8a:7b:
f3:e4:64:da:5f:5e:2d:85:7e:06:2a:83:4b:a8:1f:4d:9c:e2:
55:86:b0:2b:95:e8:1c:39:fb:69:75:04:90:b9:9b:0c:30:35:
00:68:c6:9c:cb:81:51:03:7c:1b:cf:4b:99:0d:8e:6b:65:90:
c9:7f:19:0c:8c:65:0e:a9:39:fe:ea:f1:56:7a:c8:0f:cf:e5:
d1:9a:a4:be:88:75:cf:6b:7b:81:39:64:e5:39:f6:1b:0c:ff:
ba:8c:31:18:a2:5b:4e:31:d4:3a:00:80:b7:4a:2b:45:61:23:
a6:da:c2:72:25:97:23:7d:b8:1c:6e:ff:af:22:cc:70:50:46:
8c:3d:39:9d:6f:c9:d8:0a:81:0b:45:30:40:c3:39:9c:99:ae:
ed:81:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-ams.rpki-client.org